Live data from Hacker News

Viewing profile — bsamuels

bsamuels

HN member
Joined
Wed, Nov 20, 2013, 2:49 AM UTC
HN karma
2,082
Public activity
379 items

About bsamuels

Director of Engineering @ Trail of Bits. If you want to ask me a question, please send an email rather than reply on HN.

https://twitter.com/thebensams

https://github.com/bsamuels453

Recent public activity

  1. comment
    Comment #48767153

    This isn't a problem that is isolated to Git Annex. There are many maintainers out there taking anti-LLM stances, and you don't have to look very far to find OSS projects drowning …

  2. comment
    Comment #48767049

    and how do you propose fixing the hundreds, if not thousands, of valid, impactful security bugs that frontier models will find?

  3. comment
    Comment #48142124

    they buy it from research peptide vendors

  4. comment
    Comment #47052313

    thinking tokens, output tokens, etc. Being more clever about file reads/tool calling.

  5. comment
    Comment #46250629

    dont unzip an untrusted payload

  6. comment
    Comment #45946282

    welcome, you're well along the path of realizing that most of the people on this site don't know what they're talking about

  7. comment
    Comment #44227669

    IP rate limiting hasn't been a serious misuse prevention tool for 15-20 years

  8. comment
    Comment #44064483

    as soon as you publish a benchmark like this, it becomes worthless because it can be included in the training corpus

  9. comment
    Comment #43974772

    In addition to what Will posted, published reports for blockchain projects tend to be skewed compared to our other groups. Blockchain clients tend to want to publish the report, bu…

  10. comment
    Comment #43152017

    the exact details of the attack were still evolving when we pushed the blog post out, so we kept it to what we did know and what could be extrapolated from it

  11. comment
    Comment #42281925

    had the same thing coincide with covid, but much harder to fall asleep once disrupted. Melatonin only seems to last for an hour or so, so I would take one to go back to sleep after…

  12. comment
    Comment #41711871

    3. is a romance scam. pig butchering/romance scams take place over multiple months, not one texting session

  13. comment
    Comment #39539822

    I love these threads because nobody in them ever knows what entrapment is

  14. comment
    Comment #38518880

    At my previous job we used GCP and went through so much effort/tooling to try to fix IAM. We definitely would have given this tool a spin. Ignore the HN flashmob. Another use case …

  15. comment
    Comment #37971594

    > largely on account of the victims being unsympathetic. the crass bullshit that people on HN say astounds me every day. the victims here are literally the people who need protecti…

  16. comment
    Comment #36863632

    This is as meta as it gets, but I learned what it sounds like when smart sounding, but closed minded people try to shut down an idea. Looking over all the old YC projects that ende…

  17. story
  18. comment
    Comment #34926875

    do you feel the same way about Tor? If 99% of Tor's volume is helping laundering international drug trade money, distributing CSAM, etc, should it be demonized as well?

  19. comment
    Comment #34836440

    Bankruptcy and the ability to flush bad management out of the economic system is the single most redeeming feature of capitalism.

  20. comment
    Comment #33823164

    If apologists like you ran the world, I would probably have to pay Apple 30% premium on the value of my entire house if I tried to sign mortgage paperwork on an iphone

  21. comment
    Comment #32848216

    what you're referring to is an earlier way the merge was designed. there is no PoW mining anymore.

  22. comment
    Comment #32553793

    Seriously. I don't think the researcher realizes how many people try to bypass hackerone because H1 would have flagged their finding as invalid. Using h1 isn't about bug bounties, …

  23. comment
    Comment #32430214

    RE the first point: you don't have to store/host 100% of the data, content can be blocklisted based on hash or other attributes so your node doesn't replicate or retransmit it. The…

  24. comment
    Comment #32400150

    Many people confuse the account ledger model with "account abstraction". Ethereum has the first, the second is wip.

  25. comment
    Comment #32308655

    Hasn't been mentioned in the thread yet, but the Phoenix Project is also excellent for senior engineers/managers. I read it once when I was a junior engineer and didn't get much ou…